7.1.2-25
Changed 2
- Centralize checking if pinged images have a size that has zero columns or rows and removed redundant checks
- Export SetQuantumExtent() private method so coders can leverage it
Fixed 3
- Validate argument count for polynomial distortion
- Fix rare exception message leak
- Make sure the mask is properly respected when setting the alpha channel
Security 7
- Fix out-of-bounds read of GPS rationals in GetEXIFProperty
- Reject HDR files with a negative width or height
- Reject PGX files with invalid dimensions or precision
- Reject RLA files with an inverted active window
- Reject FITS files with an invalid bits per pixel
- Reject SGI files with zero columns or rows
- Reject DDS files with zero columns or rows
Merged
- validate argument count for polynomial distortion #8780
- fix oob read of gps rationals in GetEXIFProperty #8782
- reject hdr files with a negative width or height #8765
- reject pgx files with invalid dimensions or precision #8764
- reject rla files with an inverted active window #8770
- build(deps): bump github/codeql-action from 4.35.5 to 4.36.0 #8775
- reject fits files with an invalid bits per pixel #8760
- reject sgi files with zero columns or rows #8761
- reject dds files with zero columns or rows #8762
Commits
- trigger a build d73fb3c
- beta release 867f838
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-q62c-h75r-2xhc 960367f
- update configure 75bfcea
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-g22q-f7gc-5jhr 1db660b
- https://github.com/ImageMagick/ImageMagick/issues/8774 7bbbc2d
- eliminate compiler exception 81c1296
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-px7q-ggqj-hcf2 6c8afb5
- cosmetic bc64d17
- reset primitive offset fac66fd
- Centralize checking if pinged images have a size that has zero columns or rows and removed redundant checks. a89f4e4
- eliminate compiler warning 9851324
- export exception message eba82d1
- fix rare exception message leak 94bea84
- use absolute values for PHASH logs f72f5b8
- cosmetic 092b960
- phrase correction 7b3b271
- prevent reading explicit image filenames 5c00648
- Cosmetic. dad02f4
- 2nd attempt to scale pHash 0c1cf1e
- change sign 3894eff
- revert b728346
- normalize each channel independently 7f22f9f
- Put the version in the release notes. 8d99f81
- Updated the Windows dependencies and configure. 877ba07
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-p9rq-q46c-g4x6 aa288f3
- Cosmetic. 5810d75
- Added extra checks for the width and height. 271ec74
- Revert extra check that was committed by accident. 6eb7428
- https://github.com/ImageMagick/ImageMagick/issues/8766 a2bdddb
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-j989-f892-2335 310e325
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-44cp-c3ww-9rv5 e8a6145
- https://github.com/ImageMagick/ImageMagick/issues/8778 a829e2e
- revert f5f5f36
- https://github.com/ImageMagick/ImageMagick/issues/8766 3fea455
- support SetQuantumExtent() private method 706439c
- need to export so coders can leverage SetQuantumExtent() 9fb23a5
- fix wrong type 22b1aac
- fix method type 6512f37
- cosmetic ec374e3
- Minor optimization of the ClipPixelCacheNexus method. e9dcf3a
- Make sure the mask is properly respected when setting the alpha channel (#8778) 1015688
- Cosmetic. 037e462
- release 04a04ea